CWE-197: Numeric Truncation Error
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion.
A kind of CWE-681 Incorrect Conversion between Numeric Types.
From the CWE List. © The MITRE Corporation.
Newest
- qt Integer truncation vulnerability in QTextCodec conversion functions impacts Qt Framework 1.7 Low
- No product listed An integer truncation vulnerability in the NAS decoder of OpenAirInterface (OAI) CN5G AMF v2.2.1... 7.5 High
- samtools htslib HTSlib through 1.24 Heap Out-of-Bounds Write via Truncated .gzi Index Count 4.8 Medium
- nationalsecurityagency ghidra Ghidra before 12.2 Integer Truncation in PackedDecode::skipAttribute Decompiler Parser 2.0 Low
- bytecodealliance wasmtime Wasmtime: Bit-packing in Cranelift compiler causes silent overflow and miscompilation 9.9 Critical
- freertos freertos-kernel Numeric truncation in the MPU buffer authorization check in FreeRTOS-Kernel 9.3 Critical
- microsoft 365 apps, 365 apps for enterprise, office ltsc 2021 +3 more +5 more Microsoft Office Word Remote Code Execution Vulnerability 8.8 High
- microsoft 365 apps, 365 apps for enterprise, office ltsc 2021 +3 more +5 more Microsoft Office Word Remote Code Execution Vulnerability 8.8 High
- telegram Telegram rlottie Numeric Truncation Remote Code Execution Vulnerability 7.0 High
- juniper networks junos os, junos os evolved +1 more Junos OS and Junos OS Evolved: An attacker causes a routing-daemon crash when BGP Prefix-SID routes are re-advertised 8.7 High
- juniper networks junos os, junos os evolved +1 more Junos OS and Junos OS Evolved: An attacker causes a routing-process crash when MPLS-TE fast reroute is enabled 7.1 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows server 2012 +12 more +14 more Windows Domain Name Service Remote Code Execution Vulnerability 9.8 Critical
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 more Windows Text Shaping Remote Code Execution Vulnerability 8.8 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +18 more +20 more Windows Client License Service Elevation of Privilege Vulnerability 7.0 High
- microsoft 365 apps, 365 apps for enterprise, office 365 for mac +7 more +9 more Microsoft Office Word Elevation of Privilege Vulnerability 7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 more Windows Installer Elevation of Privilege Vulnerability 7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 more Microsoft Windows Search Component Elevation of Privilege Vulnerability 7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 more Microsoft Graphics Component Elevation of Privilege Vulnerability 7.8 High
- chainguard-dev apko apko /etc/passwd and /etc/group UID/GID truncation writes package-supplied entries as root 6.3 Medium
- nezhahq nezha Nezha before 2.3.8 Denial of Service via Alert Rule 7.1 High
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 7 +7 more +9 more Flatpak: flatpak: buffer overflow in oci delta stream path names on 32-bit systems 7.5 High
- oisf suricata Suricata sip: large SIP message bodies can evade detection with frame keyword 3.7 Low
- isc bind 9 Remote assertion failure via 16-bit length truncation in `dns_ncache_add()` 7.5 High
- qt Out-of-bounds read (buffer over-read) vulnerability in HTTP Cache-Control response header parsing impacts Qt Framework (QtNetwork module) 4.6 Medium
- google chrome Numeric truncation error in Media in Google Chrome prior to 153.0.8010.36 allowed a remote... 9.6 Critical
- microsoft word, 365 apps, 365 apps for enterprise +10 more +12 more Microsoft Office Word Remote Code Execution Vulnerability 8.8 High
- microsoft windows 10 version 21h2, windows 10 version 22h2, windows 11 version 23h2 +12 more +14 more Windows Spaceport.sys Elevation of Privilege Vulnerability 7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +20 more +22 more Windows Spaceport.sys Elevation of Privilege Vulnerability 8.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 more Windows Kernel Elevation of Privilege Vulnerability 7.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 more Internet Storage Name Service Information Disclosure Vulnerability 5.5 Medium
- microsoft office 365 for mac, office for android, office ltsc for mac 2021 +14 more +16 more Windows Win32k Elevation of Privilege Vulnerability 8.0 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +15 more +17 more Windows Kerberos Elevation of Privilege Vulnerability 7.8 High
- samsung open source escargot An out-of-bounds write caused by numeric truncation Samsung Open Source Escargot on Linux x86-64... 6.2 Medium
- ruby resolv An issue was discovered in the resolv gem before 0.7.2 for Ruby. Resolv::DNS::MessageEncoder... 4.0 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 more Libsoup: libsoup: integer truncation in sort_ranges() comparator causes silent omission of http range responses 5.3 Medium
- jarun nnn Numeric Truncation Error in nnn 2.4 Low
- covesa open1722 COVESA Open1722 0.9.2 Stack Memory Disclosure via acf-can-listener.c Integer Truncation 8.7 High
- capstone-engine capstone Capstone WASM `br_table` instruction-size truncation can cause no-progress disassembly and parser desynchronization 2.0 Low
- microsoft excel, 365 apps, 365 apps for enterprise +11 more +13 more Microsoft Excel Remote Code Execution Vulnerability 7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 more Windows DNS Elevation of Privilege Vulnerability 6.7 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 more Windows DNS Elevation of Privilege Vulnerability 6.7 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +20 more +22 more Windows DNS Elevation of Privilege Vulnerability 6.7 Medium
- microsoft word, 365 apps, 365 apps for enterprise +6 more +8 more Microsoft Office Word Remote Code Execution Vulnerability 7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 more Windows DNS Elevation of Privilege Vulnerability 6.7 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 more Windows DNS Elevation of Privilege Vulnerability 6.7 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 more Windows DNS Elevation of Privilege Vulnerability 6.7 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 more Microsoft Digest Authentication Elevation of Privilege Vulnerability 7.8 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +16 more +18 more Windows HTTP.sys Elevation of Privilege Vulnerability 7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +22 more +24 more Windows Network File System Elevation of Privilege Vulnerability 7.8 High
- microsoft word, 365 apps, 365 apps for enterprise +12 more +14 more Microsoft Word Information Disclosure Vulnerability 5.5 Medium
- Show olderLoading…